CVE-2026-62116
HighCVSS 7.1Summary
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 contains a Cross Site Scripting (XSS) flaw exploitable by an unauthenticated attacker. This allows injection of malicious script into site pages.
Risk Assessment
An unauthenticated attacker can inject malicious script, risking session theft, redirects or modification of content visible to users.
Recommendation
Update the Barcode Scanner with Inventory & Order Manager plugin to a version newer than 1.13.1.
Other vulnerabilities in Barcode Scanner with Inventory & Order Manager
See all- CVE-2026-62118High
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 has a broken access control flaw exploitable by an unauthenticated attacker. This allows access to functions or data that should be protected.
- CVE-2026-62117High
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 is vulnerable to SQL injection exploitable by a subscriber-level user. The flaw allows manipulation of database queries.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS